SpaceX files S‑1, Node.js 26 lands, GitHub breach exposed

SpaceX pushes an S‑1 filing

SpaceX submitted an S‑1 registration statement to the SEC. The filing marks the company’s first public offering attempt since its 2023 valuation surge. The document lists a proposed share class, a lock‑up period for insiders, and a use‑of‑proceeds table that earmarks funds for Starship production. It also repeats the company’s 2025 revenue target of $30 billion, a figure that analysts have called optimistic. The SEC filing is public at the agency’s archive. Investors will weigh the filing against SpaceX’s launch cadence, which has averaged 60 missions per year. The company claims a 95 % success rate on Falcon 9 flights, a metric that underpins the valuation.

Node.js 26.0.0 adds Temporal support

Node.js 26.0.0 shipped on the official blog. The release bundles native support for the Temporal API, a modern date‑time library that replaces the legacy Date object. Developers can now create calendar‑aware timestamps without third‑party packages. The blog notes that the new API follows the TC39 proposal and passes the full test suite. The release also bumps the V8 engine to version 12.1 and updates libuv to 1.45.0. Those upgrades improve async I/O throughput by roughly 8 % on typical server workloads, according to the release notes.

Flipper One tech specs surface

The Flipper One documentation went live on the project’s site. The spec sheet lists a 2.4 GHz ARM Cortex‑M4 processor, a 1.8 inch LCD, and Bluetooth 5.0 connectivity. The device supports sub‑GHz radio frequencies, NFC, and infrared, making it a Swiss‑army knife for hardware hackers. Power comes from a 500 mAh Li‑Po battery that the docs say lasts eight hours of continuous use. A USB‑C port provides both charging and data transfer. The firmware is open source under the GPL, allowing community contributions to expand protocol support.

GitHub breach traced to malicious VSCode extension

GitHub confirmed that a malicious VSCode extension accessed 3,800 private repositories. The extension harvested personal access tokens and exfiltrated code to an external server. The breach was discovered after a security researcher reported unusual activity on a forked repository. GitHub revoked the compromised tokens and issued a remediation guide. The company said the extension bypassed marketplace review because it was published under a legitimate developer account. GitHub is now tightening extension vetting and adding runtime monitoring for token misuse.

Microsoft taps a gaming blogger to steer Xbox strategy

Microsoft hired Matthew Ball, a former video‑game blog analyst, as chief strategy officer for Xbox. The move comes ahead of the announced Project Helix, a cloud‑gaming initiative. Ball’s résumé includes deep coverage of console market dynamics and a track record of influencing developer roadmaps. In his first memo, he promised tighter integration between Xbox hardware and Azure services. Analysts see the hire as a signal that Microsoft will double down on subscription revenue and cross‑play features. The next quarterly earnings call will likely reveal the budget allocated to Project Helix.

Industry context: open‑source security and regulatory scrutiny

The GitHub breach highlights a broader trend: supply‑chain attacks on developer tools. Recent incidents have forced platform owners to audit extension ecosystems more aggressively. At the same time, the SEC filing by SpaceX underscores how capital markets are demanding greater transparency from private aerospace firms. Regulators are scrutinizing revenue forecasts that hinge on government contracts. Node.js’s inclusion of Temporal reflects the JavaScript community’s push for safer date handling after years of bugs tied to timezone logic. The change may set a precedent for other runtimes to adopt the same API. Flipper One’s open‑source firmware aligns with a growing appetite for auditable hardware tools, especially after high‑profile firmware exploits surfaced in 2025. The device’s specs suggest a focus on low‑power, multi‑protocol hacking. Microsoft’s strategic hire fits a pattern of tech giants pulling in niche experts to accelerate product pivots. The move mirrors Amazon’s 2024 appointment of a cloud‑gaming veteran to lead Luna.

What to watch

Watch the SEC’s review comments on SpaceX’s S‑1, which could delay the offering or force a prospectus rewrite. Track Node.js adoption rates for Temporal in the next LTS release; early metrics will appear in npm download charts. Monitor GitHub’s extension marketplace for new security controls and any follow‑up disclosures of compromised repos. Follow Xbox’s quarterly briefing for the first concrete figures on Project Helix spending and subscriber growth.